Management of Change

Change with proof,
not promises.

Risk-based MOC routing that decides — automatically — whether your change needs an FMEA refresh, a JHA, training, or all three. The right reviewers see it, the right artifacts get attached, the right approvals close it out.

app.qformance.io / moc / MOC-2026-0102
MOC-2026-0102Tier 3 · safety-significantPress cell · operationalOpened 12 Apr · 6d in pipeline

Press 4 conveyor guard upgrade — replace mesh fence with light curtain

Initial risk score S4 × L4 = 16 → target residual S4 × L1 = 4
Triage
Risk auto-scored
Impact analysis
FMEA + JHA + Docs
3Approvals
3 of 4 signed
4Implementation
2 actions in flight
5Verification
Awaits residual evidence
6Closure
Lock + notify
AI auto-attached: PFMEA Press cell row 4, JHA Press 4 setup, WI-MX-12, Training course Press-Safety-L2. Reviewer assignments derived from risk score.

The triage that decides what changes.

Type the change. AI scores the risk, picks the tier, and routes it. You review the answer; the system handles the choreography.

AI risk triage

From description to tier in seconds.

Describe the change in plain language. AI reads it against your Risk Register, picks an initial S × L score, classifies the tier (1–3), suggests the artifacts that need refreshing, and proposes the reviewers. You confirm or override — the routing happens automatically.

New MOC · AI triage
Description
Replace the mesh fence guard on Press 4 conveyor with a Sick light curtain to reduce stoppage time on tool changes.
AI decided in 3 seconds
Suggested tier
TIER 3 · SAFETY
Initial score
S4 × L4 = 16
Target residual
S4 × L1 = 4
Refresh needed
PFMEA Press cell · JHA Press 4 setup · WI-MX-12
Training trigger
Press-Safety-L2 (8 operators)
Reviewers
Safety, Operations, Quality, Site lead
Tier-driven routing

Three tiers, three workflows.

Tier 1 — minor, single approver, light evidence. Tier 2 — cross-functional review, FMEA refresh required. Tier 3 — safety-significant, JHA + training + multi-discipline approval. The system enforces the path; humans decide the change.

Tier 1
Minor change · low risk
e.g. Doc typo · vendor change · cosmetic spec
1 approverLight evidenceNo FMEA refresh
Tier 2
Cross-functional
e.g. Process parameter shift · supplier swap
2–3 approversFMEA refreshDoc update
Tier 3
Safety / regulatory significant
e.g. Guarding change · new chemical · spec drift
4 approversPFMEA + JHATraining + verification

It pulls every other module along.

The hardest part of a change isn't approving it. It's making sure the FMEA, the JHA, the SOP, and the people on the floor all get updated together.

MOC-0102 · linked artifacts auto-staged
The Change
Press 4 light-curtain upgrade
Tier 3 · Safety-significant
S4×L4 → S4×L1
Auto-linked artifacts
PFMEA · Press cell · row 4
D-rating updated 6 → 2 · re-approve required
STAGED
JHA · Press 4 setup · hazard 7
Control tier upgraded to Engineering
STAGED
WI-MX-12 · Press setup
Section 3.4 (guard reset) rev v4.2 → v5.0
STAGED
Training · Press-Safety-L2
8 operators · acknowledgement required pre-close
STAGED

PFMEA refresh

Affected rows pre-staged. Approver sees diffs, not the whole table.

JHA update

Hazards re-scored against the new control. Sign-off captured before close.

SOP / WI revisions

Docs branch from current → revised. Approval cascades into acknowledgement prompts.

Training prompts

Affected operators get prompts in their Hub. Closure waits for acknowledgement.

Parallel + serial approvals

The right reviewers, in the right order.

Configure parallel approvals where reviews can run concurrently (Quality + Safety + Ops simultaneously) or serial chains where one decision unlocks the next. Delegations carry context. Reviewers see the diffs that affect them, not the whole pile.

MOC-0102 · approval chain
M. Patel · Safety lead
Reviews: JHA + light-curtain spec
14 Apr · 11:20
S. Romero · Operations
Reviews: SOP changes + downtime plan
14 Apr · 16:05
J. Tan · Quality
Reviews: PFMEA refresh
15 Apr · 09:32
4
A. Khan · Site lead
Reviews: Capital sign-off + commissioning
awaiting
Verification gate

No closure without residual evidence.

An MOC can't close until residual risk is verified — refreshed FMEA approved, JHA signed, training acknowledged, SOPs at the new revision, and any commissioning evidence attached. The system blocks closure with a specific list of what's outstanding, every time.

Closure gate · MOC-0102
Closure blocked — 2 of 6 verification items outstanding.
PFMEA refresh approved
v4.0 · J. Tan
JHA Press 4 signed
v3.1 · M. Patel
Light curtain commissioned
Sick CE cert + FAT report
WI-MX-12 published at v5.0
Substantive revision
·
Training acknowledgement 6 of 8
2 operators awaiting · 24h reminder sent
OUTSTANDING
·
30-day residual confirmation
Scheduled 14 May
OUTSTANDING

An MOC program that defends itself.

Numbers leadership and auditors actually believe — because they're calculated from the structured pipeline, not pulled from a spreadsheet.

Cycle time by tier

Median days from open to closure, broken down by tier. Spot the bottleneck — is it triage, approval, or verification?

Coverage by area

Which production lines, sites, or product families have the highest change activity. Use it to plan audit scope and risk reviews.

Residual-risk delta

Average risk reduction per tier 3 change. Make the case for the next investment with hard numbers — not the post-incident retrospective.

Change with proof, not promises.

Risk-based MOC, with the FMEA refresh, the JHA, and the training prompts wired in — exactly where you need them.